Skip to content
OpenAdvisories
Unscored DLA-1586-1 2 CVEs

openssl - security update

Published Nov 21, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 openssl 1.0.1t-1+deb8u10

Vulnerabilities 2

  • Unscored —
    CVE-2018-0735

    Timing attack against ECDSA signature generation

    The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5407 Public exploit

    Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

    openssl openssl openssl openssl1.0 Debian Ubuntu Alpine